Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft
File: StFxca6oV2xDHGN0GGkcnB9VdRY.mft (raw, json)
Hash identifier: 2synBjiNvqlcVCIHRo5RrnQMOXjDtReMqIeFraadYnM=
Subject key identifier: E6:2D:91:EE:A4:62:4C:DB:57:B0:49:B4:4F:65:76:66:67:BA:87:3A
Authority key identifier: 4A:D1:71:71:AE:A8:57:6C:43:1C:63:74:18:69:1C:9C:1F:55:75:16
Certificate issuer: /CN=4ad17171aea8576c431c637418691c9c1f557516
Certificate serial: 019848C04D2E339FB60AF7E0E120D92D6F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft
Manifest number: 12AD
Signing time: Sat 26 Jul 2025 22:00:18 +0000
Manifest this update: Sat 26 Jul 2025 22:00:18 +0000
Manifest next update: Sun 27 Jul 2025 22:00:18 +0000
Files and hashes: 1: SHXTlexCU640W6zbYxhCmQn8Cw4.roa (hash: k2ku6jDV9cI0tnwN43DyJg87QMwSJe7N2AG8yOiDsPE=)
2: StFxca6oV2xDHGN0GGkcnB9VdRY.crl (hash: 0THjd6UrSvm2AM8uJdUSHhiFDwKK/lbf32gT6vlUtbw=)
3: TPLmVhwEw6jgrdMtUuhmz_0dBbo.roa (hash: wGkqaR7oIjPHLb7cXn0PbtIJ1WFfuKuRjd0OcbETY00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:4d:2e:33:9f:b6:0a:f7:e0:e1:20:d9:2d:6f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad17171aea8576c431c637418691c9c1f557516
Validity
Not Before: Jul 26 22:00:18 2025 GMT
Not After : Jul 27 22:00:18 2025 GMT
Subject: CN=e62d91eea4624cdb57b049b44f65766667ba873a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c6:86:2d:da:6c:7d:ce:7f:53:8b:11:d1:e4:
7c:01:07:77:2e:01:f7:33:2f:5b:75:9b:29:2d:22:
4e:45:af:1c:cd:7a:31:b0:3e:68:60:4c:17:db:a7:
a5:d2:67:6d:4e:33:8f:b5:b1:37:9b:94:25:87:7c:
29:c5:05:0f:bf:16:b6:c1:62:9d:3b:7f:a8:1b:cf:
35:ba:98:36:57:8a:33:c4:40:5c:70:74:c6:9b:8e:
55:90:38:6e:2c:09:f5:0c:c3:9f:cb:1d:80:ba:8e:
53:ea:60:07:c1:03:c7:76:31:65:b7:f9:62:1c:08:
7e:e2:1d:df:11:54:31:3d:f3:ea:28:a4:f5:36:2b:
59:22:a7:eb:01:8f:ea:86:ec:69:c5:5a:f0:c3:45:
95:c5:b6:c9:77:a0:35:b8:eb:ec:4c:6a:6a:83:dc:
9e:f5:46:5b:a9:58:aa:a1:a0:93:74:61:bb:76:2d:
61:e0:ff:95:2b:fb:7c:2c:f0:2b:d1:af:a4:f2:f4:
cd:d4:6b:7e:48:bc:73:9d:4f:9f:f1:29:ce:9f:3b:
31:e6:f7:15:f8:11:64:e2:bf:83:f2:de:91:65:0a:
c3:bd:cc:7a:56:3d:1c:b0:47:42:7e:e2:e4:98:c9:
aa:2d:d5:cf:53:fa:12:aa:44:f6:ba:a9:ca:3c:d2:
72:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2D:91:EE:A4:62:4C:DB:57:B0:49:B4:4F:65:76:66:67:BA:87:3A
X509v3 Authority Key Identifier:
keyid:4A:D1:71:71:AE:A8:57:6C:43:1C:63:74:18:69:1C:9C:1F:55:75:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e6:fa:fb:c4:cb:d0:ef:d1:44:be:ff:5f:d8:33:08:3e:69:
f0:53:6f:10:fb:14:5b:a2:bc:af:ef:f2:1d:da:f6:54:b0:8a:
60:b0:72:f5:9f:46:b3:1f:c1:cb:b2:f5:33:ec:67:c1:ba:bb:
17:ba:de:ae:a0:5c:30:4d:4e:e6:80:be:b5:8d:a2:e0:a0:b6:
bf:88:1f:cd:52:dd:c8:a7:8f:c5:d0:f3:8a:f1:2a:ec:45:c3:
49:92:ae:48:dd:a7:76:f6:ff:7b:cb:b2:6a:6d:b7:f3:06:9f:
0f:80:d2:7d:4b:c8:ba:e0:7a:48:e0:d5:cb:e6:b8:44:33:7c:
db:2e:e9:a8:1f:8e:5f:21:cf:45:bd:36:a4:43:c6:09:63:7a:
1a:e8:9f:1f:81:4a:80:34:cc:ba:27:f2:25:0f:57:2e:03:cd:
e5:bd:7f:04:5f:20:89:41:22:3c:72:38:cf:fd:a7:b0:f3:41:
ea:39:82:15:67:67:f6:af:e9:e5:37:cd:e3:c0:f6:9d:ee:e9:
9c:29:76:f9:3f:52:95:db:9b:99:0d:cc:93:fe:84:ce:b0:6c:
e7:d1:66:13:dc:6f:f4:b7:ec:22:ca:45:b7:e3:0a:55:51:22:
c3:a9:49:26:e8:ca:25:a6:c1:5e:59:2c:e6:86:78:8e:a0:47:
be:22:eb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:28:59 2025 by rpki-client